Security
- The minimum password complexity requirements have increased. A password must now be 10 characters, contain at least 1 upper case letter, at least 1 special character, and at least 1 number. This does NOT affect existing passwords immediately, but users that reset or change their password will be required to meet the new standard.
- The security policies feature (Admin -> Security Policies) was significantly enhanced to allow administrators to create custom security policies for their organization and the facilities that they service. Security policies may be applied directly to a user account for members of the radiology group or enforced at the facility level for facility users.
- A new configuration item was added to security policies to restrict the maximum inactivity logout setting for users. An administrator could, for example, mandate that the inactivity timeout not exceed 1 hour for all or some users.
- A new feature called user access whitelists was added. This feature allows for restricting user login based on source IP address. A User access whitelists defines one or more IP addresses or ranges that are accepted. A security policy can optionally specify one or more whitelists. Attempts to log in from an unauthorized IP address will be denied and the user will be informed that their account is not approved for use from their current location.
- The ability to disable concurrent user sessions was added. This can be enforced per user (i.e. one session per user), or per user per IP address (one session per user, per location). When a user logs into OnePacs from multiple computers or locations in violation of this setting, they will prompted to log out or forcibly close the other session.
- User account deactivation can now be specified at a specific date and time. The user deactivation date/time is now retained indefinitely and displayed in the user management grid.
Worklist
- A new worklist dropdown filter was added to show only critical cases. The previous “stat only” was renamed “stat/critical only”
- Additional temporal filters were added to the worklist search panel
- The TTR (time-to-read) column on the worklist now displays warning / late color coding
- The ability to export the user who confirmed for interpretation an exam was added
- The ability to export the date/time a report was peer reviewed was added